Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8/3dee05eb-d60a-34fa-a6aa-92610c4fbcec.roa
File:                     3dee05eb-d60a-34fa-a6aa-92610c4fbcec.roa (raw, json)
Hash identifier:          yUI02R41zEdbMMnPd90R+iezVyq0w/LGiSM9W0dd314=
Subject key identifier:   DA:FA:31:A4:06:B3:27:3F:C1:85:D0:EA:B6:1B:30:EC:72:64:80:3C
Certificate issuer:       /CN=627df6c2-d60a-4467-85f2-dd6d009eafe8
Certificate serial:       010D0C9F43285845612860A885707FEDED25D900
Authority key identifier: 3B:AE:19:3B:C4:79:F6:F2:59:AD:1B:B8:56:E6:5F:E1:1E:DF:64:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8/3dee05eb-d60a-34fa-a6aa-92610c4fbcec.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     27218
IP address blocks:        192.30.120.0/23 maxlen: 23
                          2620:71:4000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8/627df6c2-d60a-4467-85f2-dd6d009eafe8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8/627df6c2-d60a-4467-85f2-dd6d009eafe8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:60:a8:85:70:7f:ed:ed:25:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=627df6c2-d60a-4467-85f2-dd6d009eafe8
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=e8dba9d7-1dbd-4107-b45d-e3588097ee52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e8:f3:31:92:85:65:46:46:7c:93:bd:f0:e4:
                    35:61:ea:3f:7c:6d:3e:e0:07:45:6a:b3:5a:01:a6:
                    26:92:b7:83:22:84:3b:34:c2:b2:6c:f6:ea:3f:23:
                    21:70:21:5f:a5:91:15:8c:d9:29:3b:d6:9d:e7:40:
                    e1:d4:3f:12:34:a3:03:3a:06:3a:c8:2b:bc:33:ff:
                    71:a0:52:69:ec:f1:ab:91:70:02:f1:89:af:24:07:
                    25:21:35:21:e4:1c:e7:71:a4:f6:4e:f3:fe:4a:33:
                    70:f5:5c:be:21:d8:39:8f:ac:7d:0a:83:42:8e:79:
                    2e:50:d9:92:a2:13:55:4f:87:96:5d:cc:45:25:21:
                    58:f5:eb:2b:83:25:ec:41:86:66:57:e5:01:49:49:
                    70:bb:ad:76:ba:9e:36:74:52:2e:8a:85:ce:a2:ac:
                    47:2e:90:ee:cc:77:b9:6d:ed:87:d2:f1:9b:5d:06:
                    6c:13:2e:9d:bd:8d:eb:3f:31:40:c9:6e:3a:4d:94:
                    b9:d7:d5:89:bf:23:c9:1f:2c:c2:47:f0:a8:09:3d:
                    ed:52:f8:ca:f2:46:30:aa:3d:50:73:a6:21:8e:29:
                    19:83:f5:65:8f:ef:c4:37:b2:ac:9d:3b:7f:d2:32:
                    71:1e:06:6f:16:1e:fe:7e:a4:b1:bd:04:de:90:a8:
                    17:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:FA:31:A4:06:B3:27:3F:C1:85:D0:EA:B6:1B:30:EC:72:64:80:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8/3dee05eb-d60a-34fa-a6aa-92610c4fbcec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8/627df6c2-d60a-4467-85f2-dd6d009eafe8.crl

            X509v3 Authority Key Identifier:
                keyid:3B:AE:19:3B:C4:79:F6:F2:59:AD:1B:B8:56:E6:5F:E1:1E:DF:64:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/627df6c2-d60a-4467-85f2-dd6d009eafe8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.120.0/23
                IPv6:
                  2620:71:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:55:e0:08:40:13:46:b6:49:e5:f5:25:16:7c:f6:d3:f0:ee:
         e7:71:47:b7:03:a4:b2:ea:8a:54:94:5f:5b:ea:bf:5a:e6:c6:
         08:5e:5c:8a:78:35:42:8c:89:15:9e:4d:7a:cd:0b:d4:9b:d4:
         c9:cd:cd:fa:34:0b:e9:e9:c0:65:ac:8a:9c:aa:4b:56:31:5f:
         48:45:0d:6b:21:35:c0:cf:1c:96:1d:e4:0f:42:32:bc:56:c4:
         43:53:93:76:f1:64:7c:5d:63:47:61:02:08:8c:ad:8e:9a:87:
         38:a3:8c:90:0d:48:70:44:94:ef:ea:d3:cd:57:80:06:e5:65:
         18:78:a6:aa:59:68:d4:83:26:2f:ac:d0:76:8a:b0:e3:61:4b:
         ac:f6:51:ad:90:a5:20:44:07:77:54:7a:3e:d9:f5:46:bb:e8:
         d3:8a:86:f9:ae:ac:68:26:4c:f7:9a:64:67:8f:ff:14:62:78:
         b0:1e:13:40:c8:5e:29:ef:2f:ea:25:f2:cc:e7:c8:e0:7e:71:
         b6:67:e4:1e:9c:13:89:cb:05:ae:6b:4c:6e:cc:e5:83:64:93:
         09:15:f0:41:7a:7e:22:6e:d2:f8:3d:5c:ae:23:1c:39:0b:b1:
         10:9d:f6:b3:ec:b2:56:30:88:a4:1b:51:67:7c:69:0b:09:a7:
         74:db:62:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:47:06 2024 by rpki-client on console-fra.rpki-client.org